Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/69YKOZY6YJ0wKRaWHtTwSJOKn9I.roa
File: 69YKOZY6YJ0wKRaWHtTwSJOKn9I.roa (raw, json)
Hash identifier: ncMzInzY57MZBDu4NZcOyuQCJXkK/j6lT+/mELuwgn0=
Subject key identifier: EB:D6:0A:39:96:3A:60:9D:30:29:16:96:1E:D4:F0:48:93:8A:9F:D2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2CC0058286ECEDEFA5D5B8EF9C8E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/69YKOZY6YJ0wKRaWHtTwSJOKn9I.roa
Signing time: Tue 02 Jan 2024 10:34:27 +0000
ROA not before: Tue 02 Jan 2024 10:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210903
IP address blocks: 2a10:cc44:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:2c:c0:05:82:86:ec:ed:ef:a5:d5:b8:ef:9c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebd60a39963a609d302916961ed4f048938a9fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:d4:b0:bf:e1:9c:1e:a4:9a:fe:65:c2:2d:
4e:a5:ea:29:c5:34:ef:87:e5:3f:27:f1:87:ed:66:
2d:93:fc:33:7a:98:30:f4:63:d7:56:e4:6d:ed:f5:
0b:06:29:f4:9a:b2:6f:37:7f:20:53:e0:73:2b:4c:
bb:ba:02:b9:8b:1c:6f:3f:08:fe:4d:ac:8d:62:f4:
e1:56:9f:fa:fa:51:1a:f1:71:ef:e8:7c:c1:d7:e2:
7e:44:6b:b2:1a:82:ad:f2:63:d4:8f:9a:23:30:98:
ec:59:96:51:49:92:da:2a:b2:f7:e0:9d:aa:8c:eb:
de:e5:e2:f5:0b:77:ac:86:ed:f6:21:cd:74:67:c2:
16:ea:52:4b:e7:23:d1:5c:32:ce:66:28:e0:da:61:
b4:53:e4:11:a8:7e:de:7e:ea:59:c3:5b:26:11:b1:
5b:12:f5:41:83:19:8e:07:26:66:69:45:41:ce:19:
2e:9c:f6:31:70:91:75:32:11:27:73:65:c9:ec:95:
00:5b:9f:68:7f:9e:27:e8:12:08:28:cb:81:e7:e2:
68:99:be:64:0c:8b:1f:b9:63:a3:8d:c7:39:23:5e:
2e:8d:91:7f:54:62:13:92:e7:79:b8:2d:82:93:fa:
5d:6f:a7:5d:f1:0c:67:99:22:34:8f:af:69:56:c1:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D6:0A:39:96:3A:60:9D:30:29:16:96:1E:D4:F0:48:93:8A:9F:D2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/69YKOZY6YJ0wKRaWHtTwSJOKn9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
0e:bc:cf:3f:72:5e:dd:41:12:0a:12:7a:7e:75:f4:d1:0e:8e:
2f:8b:22:25:66:12:d0:c1:f6:73:90:5c:c7:c5:d6:40:35:c8:
ff:6d:0d:0b:d4:78:95:83:a5:2c:34:82:59:c6:46:12:f7:83:
a6:ec:81:f1:08:f1:af:8a:b7:94:ed:db:ce:54:26:4f:9b:ad:
5a:25:a8:c7:79:58:3f:87:2b:e8:ed:0a:d6:e4:1f:63:9a:ba:
1c:72:1d:7d:38:22:d5:be:1b:3f:cb:6e:aa:46:6e:74:03:14:
69:00:93:0f:f0:19:3e:d1:af:de:6d:cb:8c:36:de:24:33:ed:
bd:5e:e9:55:32:57:cb:e3:46:de:47:e3:1a:27:c7:0d:3b:d9:
02:fa:e8:d5:1c:69:cf:3a:01:a1:13:f1:f2:b5:54:0c:df:70:
9b:c4:44:d2:48:26:a5:9b:a5:60:f9:1f:76:26:93:77:24:5c:
50:2f:3d:0b:e9:22:1a:c4:86:51:0e:43:6f:c4:3b:bb:c6:54:
bd:ca:ad:95:16:68:3b:56:d8:62:ff:cb:d4:cb:54:fa:3c:78:
17:a7:e5:76:ea:39:54:6f:cf:eb:98:35:d6:76:6c:06:fa:09:
53:96:ab:b3:01:3d:5b:ed:d8:34:05:91:e0:2a:b1:73:8f:0a:
c8:20:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:29 2024 by rpki-client on console-fra.rpki-client.org